CurveBall

CurveBall CVE-2020-0601 - PoC CVE-2020-0601: Also known as CurveBall or ChainOffFools, is a vulnerability in the Microsoft CryptoApi specificly in Crypt32.dll where elliptic curve signatures ECDSA of certificates is not correctly verified. There is a very nice blog post here which explains the...

follina-CVE-2022-30190

follina-CVE-2022-30190 follina zero day vulnerability to help Microsoft to mitigate the attack Description follina.py -h decompress nc64.zip at the root folder before usage...

CVE-2026-65660-Poc

MS SharePoint CVE-2026-65660 - Malicious Register Directive Code Injection Exploit Description This repository provides a production-ready exploit for CVE-2026-65660 Improper Control of Generation of Code, CWE-94 in Microsoft SharePoint Server. The vulnerability stems from unescaped quote injecti...

msticpy

Herramientas de Seguridad en Python y Jupyter de MSTIC Herramientas de Seguridad en Python de Microsoft Threat Intelligence. msticpy es una biblioteca para investigación y caza en ciberseguridad en Jupyter Notebooks. Incluye funcionalidad para: consultar datos de registros de múltiples fuentes...

CVE-2020-0688

CVE-2020-0688 CVE-2020-0688Microsoft Exchange default MachineKeySection deserialize vulnerability Installation Instruction: Download using git Requires git: git clone https://github.com/7heKnight/CVE-2020-0688 Download Zip File: https://github.com/7heKnight/CVE-2020-0688/archive/refs/heads/main.z...

conti-ransomware-writeup

Conti Ransomware Write Up Overview This repository contains my full investigation and technical write‑up of a Conti ransomware compromise targeting a Microsoft Exchange server. The analysis was conducted using Splunk 8.2.2 , reviewing 28,145 events across Windows Security, Sysmon, and IIS log...

CVE-2017-0037

CVE-2017-0037 Microsoft Browser Memory Corruption Vulnerability This document is about CVE-2017-0037- Microsoft Browser Memory Corruption Vulnerability. It will first introduce what a Remote Code Execution RCE is and then go over through some technical specifics. What is Remote Code Execution? A...

Follina-Vulnerability-CVE-2022-30190-Exploit-Analysis

Follina-Vulnerability-CVE-2022-30190-Exploit-Analysis Exploration of the Follina CVE-2022-30190 Microsoft Office vulnerability, including a detailed analysis, proof-of-concept exploitation in a controlled lab, and mitigation strategies. For educational and research purposes only...

AzureADAssessment

Microsoft Azure AD Assessment Assessor Guide If you are a Microsoft employee or partner performing the assessment for a customer please see the Wiki for the Assessment Guide. Install from the PowerShell Gallery If you run into any errors please see the FAQ section at the end of this document...

Estudo-de-Caso-CVE-2024-21413

CVE-2024-21413 — Moniker Link 🔗💀 Microsoft Outlook RCE + NTLM Credential Leak ⚠️ Legal Notice: This repository is exclusively for educational and security research purposes. All demonstrations were carried out in controlled and isolated environments. The use of these techniques against systems...

CVE-2017-0199

Exploit toolkit CVE-2017-0199 - v4.0 Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other...

CVE-2020-0688

CVE-2020-0688 CVE-2020-0688: Remote Code Execution on Microsoft Exchange Server Through Fixed Cryptographic Keys How to run ysonet.exe: download from here Run HTTP server: python3 -m http.server 8000 Change targeturl and your IP address in pwsh command. Install all python dependencies. Run python...

CVE-2023-21716-POC

CVE-2023-21716-POC Microsoft Word Remote Code Execution Vulnerability...

CVE-2024-21413

CVE-2024-21413 Microsoft Outlook Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413 python3 CVE-2024-21413.py -u [email protected] -p password -d [email protected] -s mail.example.com -i -u sender email address -p sender password -d...

CVE-2020-0601

ChainOfFools AKA CurveBall AKA CVE-2020-0601 Collection of CVE-2020-0601 ChainOfFools | CurveBall resources General A summary from the NSA advisory states. NSA has discovered a critical vulnerability CVE-2020-0601 affecting Microsoft Windows®1 cryptographic functionality. The certificate validati...

msdat

Quentin HARDY --- [email protected] [email protected] MSDAT MSDAT M icros oft SQL D atabase A ttacking T ool es una herramienta de pruebas de penetración de código abierto que prueba la seguridad de las bases de datos Microsoft SQL de forma remota. Ejemplos de uso de MSDAT: Tiene una ba...

AmzWord

AmzWord an automated attack chain based on CVE-2022-30190, 163 email backdoor, and image steganography Thanks to the following github repository, we referenced and modified part of the code to integrate and implement our work: gdog follina virtual-reality 中文README请看这里 Requirements gdog： Python 2....

kekeo

kekeo kekeo es un pequeño conjunto de herramientas que he comenzado para manipular Microsoft Kerberos en C y por diversión Biblioteca ASN.1 En kekeo, utilizo una biblioteca comercial externa para manejar las estructuras ASN.1 de Kerberos: OSS ASN.1/C...

defender-privilege-escalation-scanner

Defender Vulnerability Scanner Microsoft Defender vulnerability scanner — CVE-2026-41091 / CVE-2026-45498 Detects security weaknesses in Microsoft Defender deployments. For authorized security testing only. Features CVE-2026-41091 detection CVE-2026-45498 detection Microsoft Defender posture...

squarephish

SquarePhish SquarePhish es una herramienta de phishing avanzada que utiliza una técnica que combina el flujo de autenticación mediante código de dispositivo OAuth y códigos QR. Consulte PhishInSuits para más detalles sobre el uso del flujo de código de dispositivo OAuth para ataques de phishing. ...